Hello I repeat you , that only these are the only settings that permits me to run clamd server wide on this machine
OS Centos 4 , running cpanel pentium IV celeron 1.8 Ghz , 1 GB ram with about 120 users It's an hosting server so it run also Apache , php , mysql , perl , python .... If you have a more powerful machine you should surely raise these strict values. This settings permit me to execute clamd server wide with a low cost , It's better than to have nothing . > Thanks Graziano. > > I've adjusted some of my settings to match yours. It made me have a > good think about some of my settings! > > Some of your settings seemed a bit too strict to me, so I've picked a > middle setting between yours and mine. > > You have: > > >> AV Bytes >> 10000 >> > > This is half the minimum recommended - is this too low? > > Thanks, > > James. > > On 07/12/2006, at 12:10 AM, Graziano wrote: > > >> Hello >> >> I have NO problem running clamd with following (strict) configurations >> >> FixStaleSocket >> ScanMail >> LocalSocket /var/clamd >> MaxConnectionQueueLength 12 >> StreamMaxLength 1M >> MaxThreads 5 >> ReadTimeout 60 >> IdleTimeout 20 >> MaxDirectoryRecursion 2 >> SelfCheck 3600 >> ScanPE >> ScanOLE2 >> ScanMail >> ScanHTML >> ScanArchive >> ArchiveMaxFileSize 1M >> ArchiveMaxRecursion 1 >> ArchiveMaxFiles 50 >> ArchiveMaxCompressionRatio 0 >> ArchiveLimitMemoryUsage >> >> and with asp configured as follow >> ####################################################### >> >> >> External Attachment Blocking >> 1 >> Whitelisted & Local Attachment Blocking >> 0 >> >> NoProcessing Attachment Blocking >> 1 >> >> Level 4 Allowed File Extensions >> doc|xls|ppt|pdf|zip|rtf|txt >> >> Level 1 Blocked File Extensions >> exe|scr|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|cmd|com|ht[ab] >> >> >> Level 2 Blocked File Extensions >> empty >> >> Level 3 Blocked File Extensions >> zip >> >> Use Av Clamd >> checked >> >> >> Port or file socket for local Av Clamd >> /var/clamd >> >> >> Size of buffer for Av Clamd >> 512 >> >> Check local email by Av Clamd >> UNCHECKED >> >> AV Bytes >> 10000 >> =================================================================== >> =================================================================== >> >> Using this strict settings above I have no problem also on very old >> servers . >> >> Using above conf on an old pentium IV celeron I have this stat >> 44 virus detected with 7 days working and 57747 messages processed . >> >> If I use a less strict configuration , I have serious problem too. >> With current configuration , 0 problems. >> >> Talking about cpu usage I have read good things about Mail::ClamAV >> http://search.cpan.org/~sabeck/Mail-ClamAV-0.17/ClamAV.pm >> assp uses instead File::Scan::ClamAV , I don't know which is better . >> >> Graziano >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >>> On 06/12/2006, at 6:12 PM, Eric B. wrote: >>> >>> >>> >>>>> Every now and then I notice that there are no new entries in ASSP's >>>>> log. Looking at Activity Monitor I notice that clamd and >>>>> kernel_task >>>>> are both running at about 57% of CPU. kernel_task usually runs at >>>>> less than 1%. >>>>> >>>>> As soon as I quit clamd, mail starts flowing flowing through ASSP >>>>> (after it realises that it can't connect to the socket). clamd.log >>>>> doesn't say anything, - the last entries say "SelfCheck: Database >>>>> status OK". >>>>> >>>>> >>>> If you are running ClamAV integrated with ASSP, then yes - several >>>> users >>>> have already reported that this is a significant slowdown for ASSP, >>>> and >>>> everyone has recommended putting it outside ASSP. Either on the >>>> MTA itself, >>>> or a intermediate MTA that does nothing but AV & relaying between >>>> ASSP and >>>> your actual MTA. I'm not entirely sure where the slowdown is, but >>>> likely >>>> something related to the fact that ASSP is single threaded. >>>> >>>> Eric >>>> >>>> >>> Yes I am running ClamAV integrated with ASSP. If, as you suggest, it >>> is something to do with integration of ASSP with ClamAV, not ClamAV >>> itself, then I will go back to using ClamSMTP. >>> >>> Thanks Eric, >>> >>> James. >>> >>> --------------------------------------------------------------------- >>> ---- >>> Take Surveys. Earn Cash. Influence the Future of IT >>> Join SourceForge.net's Techsay panel and you'll get the chance to >>> share your >>> opinions on IT & business topics through brief surveys - and earn >>> cash >>> http://www.techsay.com/default.php? >>> page=join.php&p=sourceforge&CID=DEVDEV >>> _______________________________________________ >>> Assp-user mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/assp-user >>> >>> >>> >> ---------------------------------------------------------------------- >> --- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get the chance to >> share your >> opinions on IT & business topics through brief surveys - and earn cash >> http://www.techsay.com/default.php? >> page=join.php&p=sourceforge&CID=DEVDEV >> _______________________________________________ >> Assp-user mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/assp-user >> > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share your > opinions on IT & business topics through brief surveys - and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > > ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
